@delmaredigital/payload-puck vulnerabilities (npm)

1 vulnerability.

• @delmaredigital/payload-puck npm @delmaredigital/payload-puc is missing authorization on /api/puck/* CRUD endpoints allows unauthenticated access to Puck-registered collections CVE-2026-39397 Fix available 9.4 CriticalApril 7, 2026